Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write vulnerability. Successful exploitation could lead to arbitrary code execution.

The version of Adobe Photoshop CC installed on the remote Windows host is prior to 19.1.9/20.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb19-44 advisory.

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability.
    Successful exploitation could lead to arbitrary code execution. (CVE-2019-7978, CVE-2019-7985,     CVE-2019-7990, CVE-2019-7993)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability.
    Successful exploitation could lead to arbitrary code execution. (CVE-2019-7969, CVE-2019-7970,     CVE-2019-7971, CVE-2019-7972, CVE-2019-7973, CVE-2019-7975, CVE-2019-7980)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read     vulnerability. Successful exploitation could lead to memory leak. (CVE-2019-7977, CVE-2019-7981,     CVE-2019-7987, CVE-2019-7991, CVE-2019-7995, CVE-2019-7996, CVE-2019-7999, CVE-2019-8000)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a command injection     vulnerability. Successful exploitation could lead to arbitrary code execution. (CVE-2019-7968,     CVE-2019-7989)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write     vulnerability. Successful exploitation could lead to arbitrary code execution. (CVE-2019-7976,     CVE-2019-7979, CVE-2019-7982, CVE-2019-7983, CVE-2019-7984, CVE-2019-7986, CVE-2019-7988, CVE-2019-7992,     CVE-2019-7994, CVE-2019-7997, CVE-2019-7998, CVE-2019-8001)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Adobe Photoshop CC installed on the remote macOS or Mac OS X host is prior to 19.1.9/20.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb19-44 advisory.

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a heap overflow vulnerability.
    Successful exploitation could lead to arbitrary code execution. (CVE-2019-7978, CVE-2019-7985,     CVE-2019-7990, CVE-2019-7993)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a type confusion vulnerability.
    Successful exploitation could lead to arbitrary code execution. (CVE-2019-7969, CVE-2019-7970,     CVE-2019-7971, CVE-2019-7972, CVE-2019-7973, CVE-2019-7975, CVE-2019-7980)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound read     vulnerability. Successful exploitation could lead to memory leak. (CVE-2019-7977, CVE-2019-7981,     CVE-2019-7987, CVE-2019-7991, CVE-2019-7995, CVE-2019-7996, CVE-2019-7999, CVE-2019-8000)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have a command injection     vulnerability. Successful exploitation could lead to arbitrary code execution. (CVE-2019-7968,     CVE-2019-7989)

  - Adobe Photoshop CC versions 19.1.8 and earlier and 20.0.5 and earlier have an out of bound write     vulnerability. Successful exploitation could lead to arbitrary code execution. (CVE-2019-7976,     CVE-2019-7979, CVE-2019-7982, CVE-2019-7983, CVE-2019-7984, CVE-2019-7986, CVE-2019-7988, CVE-2019-7992,     CVE-2019-7994, CVE-2019-7997, CVE-2019-7998, CVE-2019-8001)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
127899	Adobe Photoshop CC 19.x < 19.1.9 / CC 20.x < 20.0.6 Multiple Vulnerabilities (APSB19-44)	Nessus	Windows	critical
127898	Adobe Photoshop CC 19.x < 19.1.9 / CC 20.x < 20.0.6 Multiple Vulnerabilities (macOS APSB19-44)	Nessus	MacOS X Local Security Checks	critical

Detections

Analytics

CVE-2019-7986

high

Tenable Plugins

critical

critical